General
- Target 10raas.exe
- Size 32.7MB
- Sample261107-r2ahssfb79
- SHA256 d58da07fe5bb04721097560865eb2f8b7108a92eb3313e2e9eda630fb24c2e9f
- MD5 2c88b7d7593291d7ec6f5dc5afd9d614
- SHA1 b5d30bcd5e45e0fb4f8b51935c6b048aaf21bd00
- SHA512 020aab78bdb6225803bfdb593e7fc4355f56828f3ba4bfe553644180372ceb24c4ada4a5f45d33ba1f4bfe2123e17c4ff13390591070c8eadf1c80bd5012d1f5
- SSDEEP 786432:CypLRvjXoRldWzLYcW89nukkRrBVSnGCnkt0fkhanHTvPulIPOi2nRxelxBMaMNq:Cyp3WcHkRFVSnGCnktFmHTvzjPCNIp1
- TLSH T17B7733902970F0D3F7440D35E0D0AB7DAAFD397A4ED1408779EB45ECFE1A2A478A8625
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
10raas.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
10raas.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 10raas.exe
- Size 32.7MB
- SHA256 d58da07fe5bb04721097560865eb2f8b7108a92eb3313e2e9eda630fb24c2e9f
- MD5 2c88b7d7593291d7ec6f5dc5afd9d614
- SHA1 b5d30bcd5e45e0fb4f8b51935c6b048aaf21bd00
- SHA512 020aab78bdb6225803bfdb593e7fc4355f56828f3ba4bfe553644180372ceb24c4ada4a5f45d33ba1f4bfe2123e17c4ff13390591070c8eadf1c80bd5012d1f5
- SSDEEP 786432:CypLRvjXoRldWzLYcW89nukkRrBVSnGCnkt0fkhanHTvPulIPOi2nRxelxBMaMNq:Cyp3WcHkRFVSnGCnktFmHTvzjPCNIp1
- TLSH T17B7733902970F0D3F7440D35E0D0AB7DAAFD397A4ED1408779EB45ECFE1A2A478A8625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Renames multiple (633) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Loads dropped DLL
Drops desktop.ini file(s)
Hide Artifacts: Hidden Files and Directories